> with the standard setting of the session resumption lifetime in many current browsers > seven days, as recommended upper limit Do we fix this by changing th

> with the standard setting of the session resumption lifetime in many current browsers > seven days, as recommended upper limit Do we fix this by changing that setting to a few hours? Edit: the report discusses this: "The recommended upper limit of the session resumption lifetime in TLS 1.3 [19] of seven days should be reduced to hinder tracking based on this mechanism. We propose an upper lifetime limit of ten minutes based on our empirical observations"